diff --git a/cache/ciliumcli-amd64 b/cache/ciliumcli-amd64
new file mode 100644
index 00000000000..0bd15a54bae
--- /dev/null
+++ b/cache/ciliumcli-amd64
@@ -0,0 +1 @@
+8bd9faae272aef2e75c686a55de782018013098b66439a1ee0c8ff1e05c5d32c  cilium-linux-amd64.tar.gz
diff --git a/cache/ciliumcli-arm64 b/cache/ciliumcli-arm64
new file mode 100644
index 00000000000..c3735dce990
--- /dev/null
+++ b/cache/ciliumcli-arm64
@@ -0,0 +1 @@
+b70c15e40b36ac34d59597f2448c5b4e0033964c517f926dbb9654aa07fb1e5b  cilium-linux-arm64.tar.gz
diff --git a/cache/ciliumcli.json b/cache/ciliumcli.json
new file mode 100644
index 00000000000..01981364cdd
--- /dev/null
+++ b/cache/ciliumcli.json
@@ -0,0 +1,7 @@
+{
+  "tagName": "v0.16.22",
+  "url": "https://github.com/cilium/cilium-cli/releases/tag/v0.16.22",
+  "description": "> [!IMPORTANT]\r\n> The default behavior for `cilium upgrade` has changed such that Helm values will be reset and then reused. This behavior can be reverted to the previous behavior by setting `--reset-then-reuse-values=false` or by explicitly specifying `--reuse-values` or `--reset-values` which always take precedence over `--reset-then-reuse-values`. See https://github.com/cilium/cilium/pull/36347 for details.\r\n\r\n## What's Changed\r\n* chore(deps): update golang:1.23.4-alpine3.19 docker digest to 5f33368 by @renovate in https://github.com/cilium/cilium-cli/pull/2879\r\n* Update stable release to v0.16.21 by @tklauser in https://github.com/cilium/cilium-cli/pull/2880\r\n* Pick up the latest cilium/cilium by @michi-covalent in https://github.com/cilium/cilium-cli/pull/2883\r\n* Makefile: Remove CILIUM_VERSION variable by @michi-covalent in https://github.com/cilium/cilium-cli/pull/2884\r\n* Prepare for v0.16.22 release by @tklauser in https://github.com/cilium/cilium-cli/pull/2886\r\n\r\n\r\n**Full Changelog**: https://github.com/cilium/cilium-cli/compare/v0.16.21...v0.16.22",
+  "publishedAt": "2024-12-11T09:45:27Z",
+  "isLatest": true
+}
\ No newline at end of file
diff --git a/roles/kubespray-defaults/defaults/main/checksums.yml b/roles/kubespray-defaults/defaults/main/checksums.yml
index d1096cd36e6..2d7f6737149 100644
--- a/roles/kubespray-defaults/defaults/main/checksums.yml
+++ b/roles/kubespray-defaults/defaults/main/checksums.yml
@@ -563,6 +563,7 @@ calicoctl_binary_checksums:
     v3.23.4: cdd6eace3dc2676b7eed79c665cb0b3dbdd9dcb3bf5b09d7ae20f4f015f75f9b
 ciliumcli_binary_checksums:
   arm:
+    v0.16.22: 0
     v0.16.0: 0
     v0.15.23: 0
     v0.15.22: 0
@@ -574,6 +575,7 @@ ciliumcli_binary_checksums:
     v0.15.16: 0
     v0.15.15: 0
   arm64:
+    v0.16.22: b70c15e40b36ac34d59597f2448c5b4e0033964c517f926dbb9654aa07fb1e5b
     v0.16.0: fe16bcd447fc6fe764ca75712f5832d7504845e9f782684ff09c9f52548237fe
     v0.15.23: 9aa37d99a15e72bbcb555d7ed5b88c2ae3a7e6fbc478f9ee402a835ba6b41175
     v0.15.22: 23caf44dade82b5a986e9799db333724845750bebe32e571a356ab9116406f6d
@@ -585,6 +587,7 @@ ciliumcli_binary_checksums:
     v0.15.16: 86ed6a2e796c39dd00072e7c141fc35b68d63392d1ac5e183a7ce9d7263e23a0
     v0.15.15: 5c1693ea163b094a92ebc6997b6e678cc8c24a52040c22433b58b419de74b28f
   amd64:
+    v0.16.22: 8bd9faae272aef2e75c686a55de782018013098b66439a1ee0c8ff1e05c5d32c
     v0.16.0: da98675f961833d4ffd68b1046d907b228a7d394ded2abd70a50b20eaca171c4
     v0.15.23: cda3f1c40ae2191a250a7cea9e2c3987eaa81cb657dda54cd8ce25f856c384da
     v0.15.22: c9bdf99362c16bb63ea44a214e39319d8ac1d196345792caae9665f36fe274a3
@@ -596,6 +599,7 @@ ciliumcli_binary_checksums:
     v0.15.16: f30095e1a0b926d2114b7a419141bea76e950b643182e97e666950ca05a205d9
     v0.15.15: 492279c1f960c79747290a5d1e1b21084a04a93f9e13ab4ae7df4c76fe808aff
   ppc64le:
+    v0.16.22: 0
     v0.16.0: 0
     v0.15.23: 0
     v0.15.22: 0
diff --git a/roles/kubespray-defaults/defaults/main/download.yml b/roles/kubespray-defaults/defaults/main/download.yml
index 067b673c97f..65a69ca8146 100644
--- a/roles/kubespray-defaults/defaults/main/download.yml
+++ b/roles/kubespray-defaults/defaults/main/download.yml
@@ -116,7 +116,7 @@ weave_version: 2.8.7
 cni_version: "v1.4.0"
 
 cilium_version: "v1.15.4"
-cilium_cli_version: "v0.16.0"
+cilium_cli_version: "v0.16.22"
 cilium_enable_hubble: false
 
 kube_ovn_version: "v1.12.21"
diff --git a/version_diff.json b/version_diff.json
new file mode 100644
index 00000000000..b724632cb51
--- /dev/null
+++ b/version_diff.json
@@ -0,0 +1,17 @@
+{
+  "ciliumcli": {
+    "current_version": "v0.16.0",
+    "latest_version": "v0.16.22",
+    "release": {
+      "tagName": "v0.16.22",
+      "url": "https://github.com/cilium/cilium-cli/releases/tag/v0.16.22",
+      "description": "> [!IMPORTANT]\r\n> The default behavior for `cilium upgrade` has changed such that Helm values will be reset and then reused. This behavior can be reverted to the previous behavior by setting `--reset-then-reuse-values=false` or by explicitly specifying `--reuse-values` or `--reset-values` which always take precedence over `--reset-then-reuse-values`. See https://github.com/cilium/cilium/pull/36347 for details.\r\n\r\n## What's Changed\r\n* chore(deps): update golang:1.23.4-alpine3.19 docker digest to 5f33368 by @renovate in https://github.com/cilium/cilium-cli/pull/2879\r\n* Update stable release to v0.16.21 by @tklauser in https://github.com/cilium/cilium-cli/pull/2880\r\n* Pick up the latest cilium/cilium by @michi-covalent in https://github.com/cilium/cilium-cli/pull/2883\r\n* Makefile: Remove CILIUM_VERSION variable by @michi-covalent in https://github.com/cilium/cilium-cli/pull/2884\r\n* Prepare for v0.16.22 release by @tklauser in https://github.com/cilium/cilium-cli/pull/2886\r\n\r\n\r\n**Full Changelog**: https://github.com/cilium/cilium-cli/compare/v0.16.21...v0.16.22",
+      "publishedAt": "2024-12-11T09:45:27Z",
+      "isLatest": true,
+      "component": "ciliumcli",
+      "owner": "cilium",
+      "repo": "cilium-cli",
+      "release_type": "release"
+    }
+  }
+}
\ No newline at end of file